EP4333372A1 - Avionikrechner mit einem mehrkernprozessor mit einem filterkern zwischen offenen und avionikdomänen - Google Patents

Avionikrechner mit einem mehrkernprozessor mit einem filterkern zwischen offenen und avionikdomänen Download PDF

Info

Publication number
EP4333372A1
EP4333372A1 EP23194509.8A EP23194509A EP4333372A1 EP 4333372 A1 EP4333372 A1 EP 4333372A1 EP 23194509 A EP23194509 A EP 23194509A EP 4333372 A1 EP4333372 A1 EP 4333372A1
Authority
EP
European Patent Office
Prior art keywords
core
avionics
primary
communication
computer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP23194509.8A
Other languages
English (en)
French (fr)
Inventor
Stéphane Jean-Mary MONNIER
Alexandre Fine
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Thales SA
Original Assignee
Thales SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Thales SA filed Critical Thales SA
Publication of EP4333372A1 publication Critical patent/EP4333372A1/de
Pending legal-status Critical Current

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B64—AIRCRAFT; AVIATION; COSMONAUTICS
    • B64D—EQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D45/00—Aircraft indicators or protectors not otherwise provided for
    • B64D45/0015—Devices specially adapted for the protection against criminal attack, e.g. anti-hijacking systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0236—Filtering by address, protocol, port number or service, e.g. IP-address or URL
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/567—Computer malware detection or handling, e.g. anti-virus arrangements using dedicated hardware
    • G—PHYSICS
    • G08—SIGNALLING
    • G08G—TRAFFIC CONTROL SYSTEMS
    • G08G5/00—Traffic control systems for aircraft, e.g. air-traffic control [ATC]
    • G08G5/0004—Transmission of traffic-related information to or from an aircraft
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104—Grouping of entities

Definitions

  • the present invention relates to an avionics computer intended to be on board an aircraft.
  • the invention relates more particularly to an aircraft, while being applicable to any type of aircraft, such as a helicopter or a drone.
  • the invention relates in particular to the field of cyber security in an avionics context.
  • An aircraft conventionally includes avionics equipment making it possible to assist the piloting of the aircraft, such as a flight management system, or FMS ( Flight Management System ); a guidance system, or FG ( Flight Guidance ); a flight control system, or FCS ( Flight Control System ); etc.
  • This avionics equipment exchanges information with each other using a communications network of the aircraft, which forms part of a communications system within the aircraft, generally including equipment other than avionics equipment.
  • the communication system notably comprises equipment implementing functions relating to the airline operating the aircraft, such as a maintenance system, or CMS ( Centralized Maintenance System ); or a passenger cabin management system.
  • the avionics equipment is grouped in a domain, called avionics domain, to which corresponds a security level (from the English security level ) required the highest of the aircraft communication system in order to guarantee that the operation of the functions implemented by avionics equipment is not likely to be disrupted by communications with equipment outside the avionics domain.
  • the level of safety required for other equipment is lower than the level of safety required for the avionics field.
  • the communication system is for example compliant with the ARINC 811 standard which defines different domains having different security levels in an aircraft communication system, in particular: an ACD domain (from English Aircraft Control Domain ) corresponding to the avionics domain aforementioned; an AISD domain ( Airline Information Services Domain ) comprising equipment implementing functions relating to the airline (maintenance, cabin management, etc.); And a PISD domain (from English Passenger Information and Entertainment Services Domain ) relating to entertainment and passenger information.
  • ACD domain from English Aircraft Control Domain
  • AISD domain Airline Information Services Domain
  • PISD domain from English Passenger Information and Entertainment Services Domain
  • the security level of the ACD domain corresponds to the highest security level of the aircraft communication system because the functions implemented by the equipment in the ACD domain can be essential for flight control of the aircraft.
  • the security level of the AISD domain is lower than that of the ACD domain, the functions implemented in the AISD domain being less essential, at least in the short term, for controlling the flight of the aircraft.
  • the security level of the PISD domain is lower than the security level of the AISD domain.
  • the exchange of information from a domain with a lower security level to a domain with a higher security level is very strongly restricted so as not to compromise the security of the domain with the highest security level.
  • the transfer of information from a domain, called an open domain and corresponding outside the ACD domain, to the ACD domain is strongly restricted so as not to compromise the security of the ACD domain.
  • the aim of the invention is then to propose an avionics computer making it possible to respond more effectively to this need for a security gateway between the open domain and the avionics domain.
  • the at least one primary core is adapted to communicate with the avionics domain
  • the secondary core is adapted to communicate with the open domain
  • the tertiary core then forms, through the at least filtering carried out, a security barrier between the open domain and the avionics domain.
  • the secondary core and the tertiary core then belong to a zone exposed to the open domain, in particular for the secondary core in communication with this open domain; the at least one primary core belongs to a trust zone protected by the security barrier formed by the tertiary core.
  • the avionics computer is configured to execute one or more software applications, and then fulfills a dual functionality.
  • the computer according to the invention offers spatial segregation between the processing operations associated with the avionics domain carried out, i.e. executed, by the at least one primary core; the processing associated with the open domain carried out by the secondary core distinct from the at least one primary core; and finally the processing associated with the at least one filtering to form the security barrier between the open domain and the avionics domain, carried out by the tertiary core distinct from both the secondary core and the at least one primary core.
  • the calculator according to the invention also offers temporal segregation between the processing operations associated with the at least one filtering and the other processing operations, the processing operations associated with the at least one filtering being carried out during at least one zone.
  • temporal zone dedicated to the tertiary core, and the other processing operations being carried out during one or more other temporal zones, distinct from said at least one dedicated temporal zone.
  • terminologies primary core, secondary core and tertiary core only aim to distinguish these cores from each other within the multi-core processor, with regard to the distinct roles, or functionalities, associated with these different cores. Those skilled in the art will nevertheless observe that these terminologies do not induce any relationship of order, importance or even priority between these cores. Possible alternative terminologies for these cores would be first core, second core and third core, while appearing less appropriate, given that the multi-core processor is likely to include several primary cores, that is to say several first cores.
  • an aircraft 5 comprises a communication system 10 comprising an avionics computer 15, at least one avionics equipment 20 and at least one device 22 external to an avionics domain 26.
  • the aircraft 5 is for example an airplane.
  • the aircraft 5 is a helicopter, or even a drone that can be controlled remotely by a pilot.
  • the communication system 10 typically comprises several avionics equipment 20 and/or several external devices 22.
  • the communication system 10 comprises the avionics domain 26 and an open domain 28, as shown in the figure 1 .
  • the avionics domain 26 is a domain corresponding to a highest security level on board the aircraft 5, in particular the highest required security level of the communication system 10 of the aircraft. aircraft 5.
  • the avionics domain 26 is then a domain for limiting a risk of disturbance - by at least one communication with the at least one electronic device 22 external to the avionics domain 26 - of function(s) implemented by the at least one electronic device 22 external to the avionics domain 26 - of function(s) implemented by the least one avionics equipment 20 of the avionics domain 26.
  • the avionics domain 26 includes the avionics equipment(s) 20.
  • the avionics domain 26 is typically the ACD domain according to the ARINC 811 standard of December 20, 2005.
  • the open domain 28 is a domain to which a lower security level corresponds than the security level of the avionics domain 26.
  • the open domain 28 includes the external device(s) 22.
  • the avionics computer 15 is connected to each avionics equipment 20 and to each external device 22 of the communication system 10, and then forms a communication gateway between each avionics equipment 20 and each external device 22.
  • the avionics computer 15 is on board the aircraft 5, and comprises a multi-core processor 30 configured to execute one or more avionics software applications A1, A2, A3.
  • the avionics computer 15 is configured to communicate with each avionics equipment 20 according to a respective avionics communication protocol.
  • the avionics communication protocol is for example chosen from the group consisting of: a protocol conforming to the ARINC 664 standard, such as the ARINC 664 Part 3 standard or the ARINC 664 Part 7 standard; a protocol compliant with the ARINC 429 standard; a protocol compliant with the ISO 11898 standard, known as CAN bus, such as the ISO 11898-2 standard or the ISO 11898-3 standard; and a protocol compliant with MIL-STD-1553, such as MIL-STD-1553A or MIL-STD-1553B.
  • the avionics computer 15 further comprises a primary communication peripheral 32 for each respective avionics communication protocol.
  • the avionics computer 15 typically comprises a primary communication bus 34 connecting the processor 30 to each respective primary communication device 32.
  • the avionics computer 15 is configured to communicate with each external electronic device 22 according to a respective external communication protocol.
  • the external communication protocol is for example a protocol compliant with the Ethernet standard or a protocol compliant with the ARINC 429 standard.
  • the avionics computer 15 further comprises a secondary communication peripheral 36 for each respective external communication protocol.
  • the avionics computer 15 typically comprises a secondary communication bus 38 connecting the processor 30 to each respective secondary communication peripheral 36, each secondary bus 38 being distinct from each primary bus 34.
  • Each avionics equipment 20 is on board the aircraft 5 and belongs to the avionics domain 26.
  • Each avionics equipment 20 is known per se, and is configured to implement one or more respective avionics functions.
  • Each avionics equipment 20 is for example chosen from the group consisting of: an aircraft flight management system, also called FMS ( Flight Management System ); a guidance system, or FG ( Flight Guidance ); a flight control system, or FCS ( Flight Control System ); a satellite positioning system, such as a GPS system ( Global Positioning System ); an inertial reference system, also called an IRS system ( Inertial Reference System ); an ILS landing assistance system (from the English Instrument Landing System ) or an MLS landing assistance system ( Microwave Landing System ); an active runway departure prevention system, also called a ROPS system ( Runway Overrun Prevention System ); and a radio altimeter, also denoted RA (from the English RadioAltimeter ).
  • FMS Flight Management System
  • FG Flight Guidance
  • FCS Flight Control System
  • a satellite positioning system such as a GPS system ( Global Positioning System ); an inertial reference system, also called an IRS system ( Inertial Reference System ); an ILS landing assistance system (from the English
  • Each external device 22 belongs to the open domain 28, and is on board the aircraft 5, or installed on the ground.
  • the external device 22 is a device implementing functions relating to the airline operating the aircraft, such as a maintenance system, or CMS ( Centralized Maintenance System ) ; or a passenger cabin management system.
  • CMS Centralized Maintenance System
  • the external device 22 is an electronic device with flight management functionality, for example a non-avionics onboard tablet, that is to say a non-certified onboard tablet, such as an EFB (from English Electronic Flight Bag ).
  • the processor 30 comprises at least one primary core 40 configured to communicate with at least one piece of avionics equipment 20 distinct from the computer 15; at least one secondary core 42 configured to communicate with at least one electronic device 22 external to the avionics domain 26; and a tertiary core 44 configured to carry out at least one filtering of a data message received from a respective device 22 external to the avionics domain 26 intended for a respective avionics equipment 20 of the avionics domain 26.
  • the at least one core secondary 42 is distinct from the at least one primary core 40
  • the tertiary core 44 is distinct from the at least one primary core 40 and from the at least one secondary core 42.
  • the processor 30 also includes a complementary core 46.
  • the processor 30 has four cores. More precisely, in the example of the figure 1 , the processor 30 comprises two primary cores 40, a secondary core 42 and a tertiary core 44. In the example of the figure 2 , the processor 30 comprises a primary core 40, a secondary core 42, a tertiary core 44 and a complementary core 46.
  • the processor 30 comprises more than four cores, and then typically comprises several complementary cores 46 and/or several primary cores 40 and/or secondary 42.
  • the processor 30 advantageously comprises a single tertiary core 44.
  • each primary core 40 is in relation with the avionics domain 26, and communicates only with the tertiary core 44 via a respective internal port 48.
  • the tertiary core 44 forms a filter between the open domain 28 and the avionics domain 26, and then communicates with each primary core 40 on the one hand, and with at least one secondary core 42 and/or a complementary core 46 on the other hand , these communications between cores taking place via respective internal ports 48.
  • At least one secondary core 42 is configured to implement a firewall , in order to carry out preliminary filtering of messages received from each external device 22.
  • the two primary cores 40 are in communication with only the tertiary core 44, and not with the secondary core 42.
  • the secondary core 42 communicates only with the tertiary core 44, and not with the primary cores 40.
  • the primary core 40 communicates only with the tertiary core 44, and the tertiary core 44 communicates with the secondary core 42 indirectly via the complementary core 46.
  • the complementary core 46 is then, in terms of communication, arranged between the tertiary heart 44 and the secondary heart 42.
  • Each communication of the avionics computer 15 with a respective avionics equipment 20 is carried out by the corresponding primary core 40 according to a respective avionics communication protocol and via a respective primary communication port 50 of the computer 15.
  • Each communication of the avionics computer 15 with a respective external electronic device 22 is carried out by the corresponding secondary core 42 according to an external communication protocol and via a respective secondary communication port 52 of the computer 15.
  • Each secondary communication port 52 is advantageously distinct from each primary communication port 50.
  • the avionics domain 26 including each avionics equipment 20, each primary peripheral 32, each primary bus 34, each primary core 40 and each primary port 50 belong to a trust zone 60; and on the other hand, the open domain 28 including each external device 22, each secondary peripheral 36, each secondary bus 38, each secondary core 42, the tertiary core 44, and where appropriate each complementary core 46, as well as each secondary port 52, belong to an exposed zone 62; a border 64 between the confidence zone 60 and the exposed zone 62 then corresponding to the interface of communication between the primary core(s) 40 on the one hand and the tertiary core 44 on the other hand, as shown on the figures 1 And 2 .
  • Each avionics software application A1, A2, A3 is executable by a respective core chosen from at least one primary core 40 and at least one secondary core 42.
  • the avionics software applications A1, A2, A3 are executed by the at least one primary core 40.
  • the avionics software applications A1, A2, A3 are executed by the secondary core 42.
  • certain avionics software application(s) A1, A2 are executed by the at least one primary core 40, while other software application(s) Avionics(s) A3 are executed by the at least one secondary core 42.
  • the distribution, between the at least one primary core 40 and the at least one secondary core 42, of the execution of the avionics software applications A1, A2, A3 is advantageously carried out by type of software application.
  • the or each primary core 40 is configured to execute communication applications, such as communication applications with a ground station or ACARS ( Aircraft Communication Addressing and Reporting System ), for example communication applications for air traffic or ATC ( Air Traffic Control ), communication applications for air operational control or AOC ( Air Operational Control ), and communication applications for administrative control of airlines or AAC ( Airline Administrative Control ).
  • the or each secondary core 42 is configured to execute computer equipment management applications, such as a printer management application, an application for managing certain functions of a communications server. external.
  • the processor 30 is configured to execute one or more software processes during a predefined time period, the predefined time period being repeated periodically.
  • the predefined temporal period advantageously comprises several distinct and successive temporal zones, and at least one of said temporal zones is reserved for the execution of software processing by the tertiary core 44.
  • the fact that at least one of said temporal zones is dedicated to the tertiary core 44 makes it possible to improve the performance of the avionics computer 15.
  • the execution of software processing by the at least one primary core 40 and/or the at least one secondary core 42 is preferably prohibited during the at least one temporal zone reserved for the execution of software processing by the tertiary core 44.
  • Each respective message filtering, carried out by the tertiary core 44, is typically syntactic filtering or semantic filtering.
  • Syntactic filtering advantageously comprises the verification of at least one syntactic criterion chosen from the group consisting of: the membership of the sender of the message to a list of authorized senders, the membership of the recipient of the message to a list of recipients authorized, and the conformity of the message to one of the authorized predefined formats.
  • Semantic filtering advantageously comprises the verification of at least one semantic criterion chosen from the group consisting of: the belonging of one or more data in the message to a range of authorized values, the consistency of at least one data in the message by relation to a predefined reference, and the consistency between at least two pieces of data in the message.
  • the tertiary core 44 fulfills a cyber security functionality, and also called a cyber processing core.
  • the tertiary core 44 is further configured to, after carrying out at least one filtering, transmit the message to the respective avionics equipment 20 with a communication protocol different from that associated with the message received from the respective external device 22 .
  • Each primary communication device 32 is connected between the at least one primary core 40 and the respective primary communication port 50.
  • Each primary communication device 32 is advantageously controllable via a respective primary device driver, and each primary device driver is executable in user mode (English user mode ) or in kernel mode (English kernel OS mode or kernel fashion ).
  • Each primary communication bus 34 connects the at least one primary core 40 to at least one respective primary communication device 32.
  • the avionics computer 15 comprises two primary peripherals 32, one being compliant with the ARINC 664 standard, denoted A664, such as the ARINC 664 Part 3 standard, denoted A664p3, or the ARINC 664 Part 7 standard, denoted A664p7; the other being compliant with the ARINC 429 standard, noted A429.
  • A664 the ARINC 664 standard
  • A664p3 the ARINC 664 Part 3 standard
  • A664p7 the ARINC 664 Part 7 standard
  • Each secondary communication device 36 is connected between the at least one secondary core 42 and the respective secondary communication port 52.
  • Each secondary communication device 36 is advantageously controllable via a respective secondary device driver, and each secondary device driver is executable only in user mode, or “user” mode.
  • Each secondary communication bus 38 connects the at least one secondary core 42 to at least one respective secondary communication peripheral 36.
  • the avionics computer 15 comprises two secondary peripherals 36, one complying with the ARINC 429 standard, denoted A429; the other being compliant with the Ethernet standard.
  • the avionics computer 15 makes it possible to accommodate in a modular manner a cyber security function via the tertiary core 44 and another execution function of avionics software applications A1, A2, A3 via the at least one core respective chosen from the at least one primary core 40 and the at least one secondary core 42.
  • a cyber security function via the tertiary core 44 and another execution function of avionics software applications A1, A2, A3 via the at least one core respective chosen from the at least one primary core 40 and the at least one secondary core 42.
  • IMA from the English Integrated Module Avionics
  • the avionics computer 15 according to the invention then allows to be able to use the same equipment for another function or on a new aircraft while guaranteeing, with application implementation constraints, the independence and non-disruption of the applications between them.
  • the IMA architecture and system allows for incremental certification, which means that an evolution of an application, in accordance with the implementation requirements, does not call into question the certification of the entire calculator/applications .
  • the avionics computer 15 makes it possible to accommodate one or more functions of the avionics domain 26, such as one or more functions of the ACD domain, and a cyber function through syntactic and/or semantic filtering offering protection against open domain attacks 28.
  • each secondary core 42 is in direct relationship with the open domain 28 (domain from which attacks can come) and has access to the secondary device(s) 36 exposed to the open domain 28. Each secondary core 42 is then also called exposed core.
  • Each secondary device driver 36 is preferably executed in user mode to limit the impact of a driver vulnerability and not impact the core of the avionics computer 15.
  • the tertiary core 44 has no direct access with one of the secondary peripherals 36 receiving data from the open domain 28, and also no direct access to primary peripherals 32 in the avionics domain 26, this to avoid a short -circuiting of cyber processing between the open domain 28 and the avionics domain 26.
  • the filtering function implemented by the tertiary core 44 aims to ensure that each flow transmitted to the avionics domain 26 conforms to an uncompromised aeronautical flow.
  • a flow from the open domain 28 must pass through these two cores, namely the secondary core 42 called exposed heart, then the tertiary heart 44 called processing heart cyber.
  • the performance of the avionics computer 15 is ensured by secondary 42 and tertiary 44 cores allocated statically and with dedicated time zones during each predefined time period.
  • the other cores, in particular the primary core(s) 40, are advantageously dedicated to application applications in an IMA system.
  • the avionics computer 15 Starting from an aeronautical function previously hosted in an IMA computer or not, the avionics computer 15 according to the invention with its multi-core processor 30, where two cores 42, 44 are associated with cyber security and the other cores can be used to host the initial aeronautical function therefore makes it possible to add a cyber security function to the initial aeronautical function, without adding a computer or electronic card.
  • the avionics computer 15 makes it possible to respond more effectively to the need for a security gateway between the open domain 28 and the avionics domain 26.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Aviation & Aerospace Engineering (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • Computer And Data Communications (AREA)
  • Stored Programmes (AREA)
EP23194509.8A 2022-09-01 2023-08-31 Avionikrechner mit einem mehrkernprozessor mit einem filterkern zwischen offenen und avionikdomänen Pending EP4333372A1 (de)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
FR2208775A FR3139400A1 (fr) 2022-09-01 2022-09-01 Calculateur avionique comprenant un processeur multicœurs, avec un cœur de filtrage entre des domaines ouvert et avionique

Publications (1)

Publication Number Publication Date
EP4333372A1 true EP4333372A1 (de) 2024-03-06

Family

ID=85175884

Family Applications (1)

Application Number Title Priority Date Filing Date
EP23194509.8A Pending EP4333372A1 (de) 2022-09-01 2023-08-31 Avionikrechner mit einem mehrkernprozessor mit einem filterkern zwischen offenen und avionikdomänen

Country Status (3)

Country Link
US (1) US20240076057A1 (de)
EP (1) EP4333372A1 (de)
FR (1) FR3139400A1 (de)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR3079609B1 (fr) 2018-03-29 2020-06-26 Thales Calculateur amovible pour aeronef
EP3792759A1 (de) * 2019-09-12 2021-03-17 Thales Verfahren für den zugang zu aufgeteilten ressourcen einer it-plattform, entsprechendes computerprogramm und entsprechende it-plattform

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR3079609B1 (fr) 2018-03-29 2020-06-26 Thales Calculateur amovible pour aeronef
EP3792759A1 (de) * 2019-09-12 2021-03-17 Thales Verfahren für den zugang zu aufgeteilten ressourcen einer it-plattform, entsprechendes computerprogramm und entsprechende it-plattform

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
DIPANKAR DASGUPTA ET AL: "A conceptual model of self-monitoring multi-core systems", CYBER SECURITY AND INFORMATION INTELLIGENCE RESEARCH, ACM, 2 PENN PLAZA, SUITE 701 NEW YORK NY 10121-0701 USA, 21 April 2010 (2010-04-21), pages 1 - 4, XP058199368, ISBN: 978-1-4503-0017-9, DOI: 10.1145/1852666.1852760 *
FARRUKH ANAM ET AL: "FLYOS: Integrated Modular Avionics for Autonomous Multicopters", 2022 IEEE 28TH REAL-TIME AND EMBEDDED TECHNOLOGY AND APPLICATIONS SYMPOSIUM (RTAS), IEEE, 4 May 2022 (2022-05-04), pages 68 - 81, XP034140860, DOI: 10.1109/RTAS54340.2022.00014 *

Also Published As

Publication number Publication date
FR3139400A1 (fr) 2024-03-08
US20240076057A1 (en) 2024-03-07

Similar Documents

Publication Publication Date Title
US9038160B2 (en) Use of data links for aeronautical purposes without compromising safety and security
EP2008376B1 (de) Verfahren und einrichtung zur kommunikation auf einer kommunikationsverbindung zwischen einem flugzeug und einer bodenstation
US8341298B2 (en) Scalable on-board open data network architecture
EP2819317B1 (de) Flugzeug-basiertes mobiles Geräteanschlussystem mit einer Schnittstelle für ein Avionik-system, einer drahtlosen Schnittstelle und ein Datensicherheitsmodul das Avionik-daten empfängt und zu mobilen Geräten über die Schnittstellen überträgt.
WO2005086113A1 (fr) Procede automatique de transmission des alertes de surveillance d’un aeronef vers le sol
EP2165156B1 (de) Anzeigesystem für flugtechnische und nichtflugtechnische anwendungen
Yapp et al. UAV as a service: Enabling on-demand access and on-the-fly re-tasking of multi-tenant UAVs using cloud services
WO2004027732A1 (fr) Interface homme-machine de commande du pilote automatique pour aerodyne pilote pourvu d'un terminal de reseau de transmission atn
EP3017367A1 (de) Kommunikationsvorrichtung für bordsystem
FR2804227A1 (fr) Ensemble de pilotage et/ou de controle d'organes fonctionnels d'un avion
US20160335309A1 (en) Systems and method for wirelessly and securely updating a terrain awareness warning system database
EP3547736A1 (de) System und verfahren zur ermöglichung externer vorrichtungskonnektivität mit avioniksystemen
EP3433980B1 (de) Kommunikationsnetzwerk
EP3487153B1 (de) Flugzeugvorrichtung und sendeverfahren einer datennachricht zum empfang durch mindestens eine elektronische empfangsvorrichtung, entsprechende elektronische empfangsvorrichtung, entsprechendes empfangsverfahren und computerprogramm
WO2020127703A1 (fr) Dispositif de pilotage destine a etre integre dans un aeronef preexistant
EP4333372A1 (de) Avionikrechner mit einem mehrkernprozessor mit einem filterkern zwischen offenen und avionikdomänen
EP3675440B1 (de) Umschalter mit einem beobachtbarkeits-port und kommunikationssystem, das einen solchen umschalter umfasst
EP1156637A1 (de) Mehrprotokollrouter
EP2689569B1 (de) Vorrichtung zur verbindung mit einem hochsicherheitsnetz
EP3675430A1 (de) Gemischtes avionik-kommunikationssystem vom typ arinc 664 p7 und ethernet mit vorgegebenem routing
CA2932712C (en) Apparatus and methods for providing network security on a mobile platform
FR3090979A1 (fr) Système de pilotage alternatif destiné à être intégré dans un aéronef préexistant
CA3008407A1 (en) Providing communication over a plurality of networks
EP3585030A1 (de) Kommunikationssystem und -verfahren eines luftfahrzeugs
FR3023636A1 (fr) Architecture pour systemes tele-operes

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC ME MK MT NL NO PL PT RO RS SE SI SK SM TR